1trAIner privacy policy (personal data processing)
Revision of 15 October 2026. The personal-data operator (controller) is OUTSTAFFHUNTER LIMITED LIABILITY COMPANY (OOO «АУТСТАФХАНТЕР»), INN 9710100609, OGRN 1227700436479.
1. What data we process
Depending on how the Service is used, we may process account data, payment data, sports and physiological data, messages, voice messages, files, AI responses, and technical data.
Data about workouts, activity, sleep, recovery, heart rate, weight, well-being, injuries, and limitations may relate to health information and is processed only with the user’s separate consent. Data from connected devices and services (such as Garmin, Strava, Polar, or COROS) is retrieved only after the user explicitly authorizes the connection, and is used solely to provide the coaching service to that user.
With your permission, the 1trAIner iPhone app may read data from Apple Health (HealthKit): workouts, sleep, heart rate, heart-rate variability, steps, energy expenditure, and weight. This data is sent only to the 1trAIner server under your account, is used solely to build your plan and recommendations, is never shared with third parties (except an AI assistant you connect yourself — see «Connecting your own AI assistant»), never used for advertising or marketing, and never sold. You can revoke Health access in iPhone Settings at any time; app data is deleted together with the account.
When you connect a Polar watch, the service receives, with your permission and via Polar AccessLink: workouts (including heart rate, pace, and GPS track), daily activity, sleep and recovery (Nightly Recharge, heart-rate variability), and physical metrics (weight, VO2max, heart-rate thresholds). This data is stored under your account and used only to build your plan, workout analyses, and 1trAIner game mechanics; short workout summaries are shared with our AI-processing provider acting on our behalf. Data source: Polar Flow. You can disconnect Polar in your account settings; on disconnection we revoke access with Polar and delete the tokens. Data-sharing consents are also managed at account.polar.com.
When you connect a COROS watch, the service receives, with your permission and via the official COROS service: workouts (including heart rate, pace, and GPS track), sleep, heart-rate variability and recovery, fitness assessment (VO2max, threshold pace), and weight from your COROS profile. This data is stored under your account and used only to build your plan, workout analyses, and 1trAIner game mechanics; short workout summaries are shared with our AI-processing provider acting on our behalf. If you explicitly enable sending the plan to the watch, the service writes structured workouts from your daily plan (running, cycling, trail running) to your COROS calendar and updates them when the plan changes; nothing else is written to the watch. Data source: COROS. You can disconnect COROS in your account settings; on disconnection we revoke access with COROS and delete the tokens, and access can also be removed in the COROS app.
2. Connecting your own AI assistant
On your own initiative, you can connect a third-party AI assistant that supports the MCP protocol (for example, ChatGPT by OpenAI or Claude by Anthropic) to your 1trAIner account. A connection is possible only after you sign in and give separate consent on the connection page. Consent is given for each connection separately; we keep the date and the version of that consent.
At the request of the connected assistant, the service provides it with: profile and goals, workouts, training load and fitness, sleep and recovery, and training plans. Some of this data may relate to health information. The assistant can also record weight, well-being, and manual workouts in your account. Strava data is not shared through the connection.
You choose the assistant, and it is not our service provider. Once it receives the data, it processes it under its own rules as an independent controller, including on servers outside the Russian Federation (cross-border transfer). 1trAIner does not control how the third-party assistant uses and stores the data it receives. Before connecting, please review the privacy policy of the service you choose.
You can revoke access at any time in Profile → Integrations → Your AI. Access ends immediately and no new data is sent to the assistant. Data the assistant received before revocation is deleted under that service’s rules. For security and to show it in your account, we keep a log of the assistant’s requests: which action was performed and when. The content of responses is not logged.
3. Purposes of processing
Registration and administration of the account, providing 1trAIner informational services, generating plans and recommendations, accepting payment, service notifications, security, and technical support.
4. Sharing, retention, and deletion
We do not sell personal data and do not share it with third parties for their own purposes. We may use service providers (hosting, AI processing, payments) that act on our behalf under confidentiality obligations. Data is kept while the account is active and is deleted when the user disconnects a data source or requests deletion, unless a different retention period is required by law.
Unused accounts. If the email address provided at registration is not confirmed within 7 days and the account has not been used during that time (no data sources connected, no messages in the Service bot), the account and the data associated with it are deleted. If an account with a confirmed address is not used (no sign-ins, no messages in the Service bot and no new workouts), we send a notice to that address; if the account is still not used within 14 days after it, the account is suspended and we notify you in a separate email. Signing in within 30 days after suspension fully restores the account. After that period the account and the personal data associated with it are deleted, except for information whose retention period is set by the legislation of the Russian Federation (including payment records). Deletion of unused accounts does not apply to users who have paid for a subscription.
5. Web analytics and cookies
The website runs Yandex.Metrica (YANDEX LLC): it sets cookies named _ym_uid, _ym_d, _ym_isad and similar, and collects anonymized technical data about the visit — page address, referrer, device and browser type, and on-page actions, including click maps and session recording (Webvisor). Metrica is used to measure traffic and interface usability; this data is not combined with sports or health data and is not used for advertising. See «Cookies and web analytics» for details.
6. Security
Data is transmitted over TLS and stored encrypted, with strict per-user isolation and least-privilege access.
Requests regarding personal data: info@1trainer.ru.